From 2cc0d267a04a7eb28607d2fc591d16516061f8b1 Mon Sep 17 00:00:00 2001
From: Scrut1ny <53458032+Scrut1ny@users.noreply.github.com>
Date: Tue, 3 Feb 2026 03:38:18 +0000
Subject: [PATCH 1/2] Add FADT hypervisor vendor identity check in vmaware.hpp

---
 src/vmaware.hpp | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/vmaware.hpp b/src/vmaware.hpp
index 58d682c..e099902 100644
--- a/src/vmaware.hpp
+++ b/src/vmaware.hpp
@@ -6604,6 +6604,16 @@ struct VM {
                     debug("FIRMWARE: C2 and C3 latencies indicate VM");
                     return true;
                 }
+
+                if (buffer_len >= 276) {
+                    u64 hypervisor_vid = 0;
+                    memcpy(&hypervisor_vid, buffer + 268, 8);
+
+                    if (hypervisor_vid != 0) {
+                        debug("FIRMWARE: FADT 'Hypervisor Vendor Identity' field is occupied");
+                        return true;
+                    }
+                }
             }
 
             return false;

From 71345c9ef13fe052f756554241297347e6aa4963 Mon Sep 17 00:00:00 2001
From: Scrut1ny <53458032+Scrut1ny@users.noreply.github.com>
Date: Tue, 3 Feb 2026 04:10:20 +0000
Subject: [PATCH 2/2] Fix debug message for Hypervisor Vendor Identity

---
 src/vmaware.hpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/vmaware.hpp b/src/vmaware.hpp
index e099902..d67e086 100644
--- a/src/vmaware.hpp
+++ b/src/vmaware.hpp
@@ -6610,7 +6610,7 @@ struct VM {
                     memcpy(&hypervisor_vid, buffer + 268, 8);
 
                     if (hypervisor_vid != 0) {
-                        debug("FIRMWARE: FADT 'Hypervisor Vendor Identity' field is occupied");
+                        debug("FIRMWARE: FACP 'Hypervisor Vendor Identity' field is occupied");
                         return true;
                     }
                 }